IN THE CLAIMS 

75. (Currently Amended) A method of Authenticating a remote party and 
establishing a cryptographic tey for secure communications via an insecure 
communication channel, saicTmethod including the steps of: 

generating a first challenge signal of minimum duration T, where T is a fixed 
time Interval and is larger than the channel transmission and processing delay: 

generating a random number x, computing g x modulo p f where g and p are 
numbers, deriving a key I<a from g* modulo p, encrypting said first challenge signal 
with the key k* and a symmetric key cryptosystem to provide a first ciphertext and 
sending athe first ciphertext to said remote party; 

receiving a second ciphertext from said remote party r ; 
sending g x modulo p to said remote party T and starting a clock; 
receiving o third ciphertext ond g y modulo p from paid remote party; 
receiving a third ciphertext from said remote party , stopping the cloc k after 
receiving the third ciohertext r and computing an elapsed time interval of said clock; 

deriving a key k B from received g y modulo p 7 computing 3 ^ modulo p, deriving 
o key I < ab from g ** modulo p , decrypting said second ciphertext with the kev ka to 
recover a second challenge signal from said remote party; 7 

computing o Xy modulo p, deriving a kev from o* y modulo d: 
decrypting said third ciphertext with the key to recover a first response 
signal from said remote party; 

verifying that said elapsed time of the clock is within a predetermined interval 
(TL A) TU A ), where TL A and TU A are positive numbers; 

verifying that said second challenge signal is produced by said remote party; 
producing a second response signal of minimum duration T, encrypting said 
second response signal with the key k Ap to provide a fourth ciphertext and sending 
athe fourth ciphertext to said remote party; ' j 

verifying that said first response signal is a response produced by said remote 
party to said first challenge signal; and 

after verifying that said second challenge signal and that said first response 
signal are produced b y said remote party and that said elapsed time is within the 
predetermi n ed interval, g e nerating using^a key k from g** modulo p for secure 
communications with said remote party. 

76, (Currently Amended) The method according to claim 75. wherein said 
challenge signals and response signals represent biometrics characteristics (cuch ac ? 
voio o oi gnolo) of the produci n g authenticating and remote parties. ! 
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77. (Currently Amended) The method according to claim 75, wherein verification 
of said first response signal and said second challenge signal from said remote party 
^are based on familiarity ef -with the remote party's biometrics 
characteristto.&xyy ption of c o l d cha l lcn g a a n d rosponoo signa ls^s^etf orm o d us ipf 
a-cry ptograph i o commitment funct io n 

78. (Previously Presented) The method according to claim 75. where TU is t, + 1 
and TU A is t, + t 2 + T, with t, being the duration of said first challenge signal and t 2 
being the duration of said first response signal. 

79. (Currently Amended) An apparatus for authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said apparatus including: 

means for generating a first challenge signal of minimum duration T, where T 
is a fixed time interval, and-it is larger than the channel transmission and processing 
delay; 

means for generating a random number x, computing g x modulo p, where g 
and p are numbers, deriving a key kA from g* modulo p. encrypting said first 
challenge signal with the kev k A and a symmetric key cryptosystem to provide a first 
ciphertext . and sending athe first ciphertext to said remote party; 

means for receiving a second ciphertext from said remote party-; 

means for sending g x modulo p to said remote party 7 and starting a clock; 

means for receiving a th i rd c i phert e xt an d g y modulo p from said remote party* 

means for receiving a third ciohertext from said remote oartv. stopping the 
cloc k after receiving the third ciphertextr and computing an elapsed time interval of 
said dock; 

means for deriving a key k B from received g y modulo p , comput i ng g ^-modate 
^-derivi ng q koy k A8 4Fom-§ Ky modulo p , decrypting said second ciphertext with the 
key ka to recover a second challenge signal from said remote eartyrparty; 

means for computing o* y modulo o. deri ving a kev kA* from g** modulo p; 

means for decrypting said third ciphertext with the kev k AB to recover a first 
response signal from said remote party; 

means for verifying that said elapsed time of the clock is within a 
predetermined interval (TL A , TUa), where TL A and TU A are positive numbers; 

means for verifying that said second challenge signal is produced by said 
remote party; 



means for producing a second response signal of minimum duration T, 
encrypting said second response signal with the key,,^ to provide a fourth ciphertext 
and sending athe fourth ciphertext to said remote party; 

means for verifying that said first response signal is a response produced by 
said remote party to said first challenge signal; and 

means for g^eratiw -using a key k from g** modulo p for secure 
communications with said remote party after verifying that said first response signal 
is a response produced bv said remote party to said firs t challenge signal, 

80. (Currently Amended) The apparatus according to claim 79, wherein said 
challenge signals and response signals represent biometrics characteristics (such as 
vQiOQ signatefof the- pmduclno authenticating and remote parties. 

81 . (Currently Amended) The apparatus according to claim 79, wherein 
verification of said first response signal and said second challenge signal from said 
remote party fe-are based on familiarity ef -with the remote party's biometrics 
characteristics. Encryption of s aid ohal lon go ond r e sponse sign al s-is p e rformed using 
o cryptographic commitment funot i on. 

82. (Previously Presented) The apparatus according to claim 79, where TL A is ti 
+ t 2 and TU A is ti + 1 2 + T f with t t being the duration of said first challenge signal and 
t 2 being the duration of said first response signal. 

83. (Currently Amended) A method of authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said method including the steps of: 

receiving a first ciphertex t, containing a first challenge signal from said 
remote party, generating a random number y, computing g y modulo p t where g and p 
are numbers; 

producing a fifst -second c hallenfle signal of minimum duration T, where T is a 
fixed time interval and it-is larger than the channel transmission and processing 
delay; 

deriving a key k B from g y modulo p t encrypting said flfst-second challenge 
signal with the key ka and a symmetric key crvptosvstem to provide a second 
ciphertext . and sending a said second ciphertext to said remote party; 
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receiving g x modulo p from said remote party, deriving a key k A from g* 
modulo p. decrypting said first ciphertext frith the key k A to recover a-feseeefld-fM 
challenge signal from said remote party; 

verifying that said se^eod-fjrsLchallenge signal is produced by said remote 
party, and producing a first response signal of minimum duration T; 

computing g w modulo p, deriving a key k*B from g"* modulo p, encrypting said 
first response tlgn- 1 th« k«v k,. to provide a third ciphertext, and_sending a-the 
third ciphertext aa*i-tr> the remote party; 

sending q y modulo p to said remote party? and starting a clock; 
receiving a fourth ciphertext, stopping the clock, and computing the elapsed 
time of the dock, and decrypting the fourth ciphertext w it h , the ksyJto B-to recover a 
second response signal from said remote party; 

verifying that said elapsed time of said clock is within a predetermined interval 
(TU. TU B ), where TL B and TU B are positive numbers; 

verifying that said second response signal is a response produced by said 
remote party to said fif»Hecond.challenge signal; and 

after verifying that said first ch allenge signal and that said second response 
signal are produced bv saM remote part y and that said elapsed time is within the 
predetermined interval, gonoroting using_a key k from g** modulo p for secure 
communications with the remote party. 

84. (Currently Amended) The method according to claim 83, wherein said 
challenge signals and response signals represent biometrics characteristics (such -as 
voice -.ignnln) nf thr p*™*"^ mtthpntinaHnq and remote parties. 

85. (Currently Amended) The method according to claim 83, wherein verification 
of said seeend-fjrjLchallenge signal and said second response signal from sajd 
remote party is-are based on familiarity ef- with the remote party's biometrics 
characteristics.-Bwe fyptiQn of oaid ohallongo and response Fiign al o io porformod uoing 
a cryptographic commitm e nt funot i Q Fb 

86. (Currently Amended) The method according to claim 83, where TL B is U + U 
and TU B is tg + U + T, with being the duration of the fira**ecpndchallenge signal 
and U being the duration of the second response signal. 
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87- (Currently Amended) An apparatus for authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said^ apparatus Including: 

means for receiving a first Hphgrtext, containing a first challenge signaj from 
said remote party, generating a random number y, computing g y modulo p, where g 

and p are numbers; 

means for producing a fast -second challenge signal of minimum duration T. 
where T is a fixed time interval and-it is larger than the channel transmission and 
processing delay; 

means for deriving a key ka from g y modulo p, encrypting said first -second 
challenge signal with the key k B and a symmetric key cryptosystem to provide a 
second ciphertext . and sending asaid second ciphertext to said remote party; 

means for receiving g x modulo p from said remote party, deriving a key kA 
from g* modulo p, decrypting said first ciphertext with the key k A to recover a oocond 
the first challenge signal from said remote party; 

means for verifying that said seeeBd-fjrsLchallenge signal is produced by said 
remote party, and producing a first response signal of minimum duration T; 

means for computing g7 modulo p, deriving a key k^ from g* modulo p, 
encrypting said first response signal with the kev k A R to provide a third ciphertext 7 _and 
sending a-the third ciphertext awd -to the remote party; 

means for sending g y modulo p to said remote party? and starting a clock; 

means for receiving a fourth ciphertext, stopping the clock, and computing the 
elapsed time of the clock, and decrypting the fourth ciphertext with the key k A s„to 
recover a second response signal from said remote party; 

means for verifying that said elapsed time' of said clock is within a 
predetermined interval (TL B , TU B ), where TL B and TU B are positive numbers; 

means for verifying that said second response signal is a response produced 
by said remote party to said ftest -second c hallenge signal; and 

means for g e n e rat i no - u sino a key k from g** modulo p for secure 
communications with the remote part y, after verifying that said second response 
signal is a response produced bv said remote party to said second challenge signaj . 

88. (Previously Presented) The apparatus according to claim 87, wherein said 
challenge signals and response signals are signals representing biometrics 
characteristics. 
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89. (Currently Amended) The apparatus according to claim 87, wherein 
verification of said saeend -first challenge signal and said second response signal 
from the_remote party te-are based on familiarity ef -with the r emote party's biometrics 
characteristics.- Enoryption of cald ohaliongo and rosponso o l gno l G i o porformod using 
ehe ryptograph l c commitmont function: 

90. (Currently Amended) The apparatus according to daim 87, where TL B is ts + I 
U and TU B is U + U + T f with t 3 being the duration of the firs Uecond challenge signal 
and U being the duration of the second response signal. 

91 . (Currently Amended) A method of authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said method including the steps of; 

g enera tjng a first challenge signal of minimum duration T, where T is a fixed 
time interval and it-is larger than the channel transmission and processing delay; 

generating a random number x, computing g x modulo p, where g, and p are 
numbers, deriving a key kA from g* modulo p, encrypting said first challenge signal 
with the key kA and a symmetric key crvptosvstem to provide a first ciphertext . and 
sending a-the first ciphertext to said remote party; 

receiving a second ciphertext, sending g x modulo p to said remote party, and 
starting a clock; 

receiving g y modulo p f computing a key k B from g y modulo p, decrytping the 
second ciphertext with the key k H to recover a second challenge signal from said 
remote party; 

verifying said second challenge stat e mont signal t o ensure that said second 
challenge otatemont signal is produced by said remote party, and producing a first 
second response signal of minimum duration T; 

computing g** modulo p, deriving a key kAB from g** modulo p, encrypting said 
first- second response signal with the key k*g to provide a fourth ciphertext and 
sending a-the thtfd -fourth ciphertext to said remote party; 

receiving a fewth -third ciphertext from said remote party, stopping said clock, 
decrypting the fewth -third ciphertext with the key k A R to recover a s e cond first 
response signal from said remote party; 

verifying that said elapsed time of said clock is within a predetermined interval 
(tl Af tu A ). where tl A and tu A are positive numbers; 

verifying that said seeeBd- first response signal is a response produced by 

said remote party to said first challenge signal; and 

- 9 - 



after verifying that said second challenge signal and that sa id first response 
signal are produced bv said remote party and that said elapsed tim e is within the 
predetermined interval. gefieratffig-usuifl,a key k from g** modulo p for secure 
communications with said remote party, 

« 

92. (Previously Presented) The method according to claim 91 , wherein said 
challenge signals and response signals are signals representing biometrics 
characteristics* 

93. (Currently Amended) The method according to claim 91 , wherein verification 
of sa id s GGQnc j fi rstjesponse signal and said second challenge signal from the 
remote party fs- are based on familiarity of -with the remote party's biometrics 
characteristics, e ncrypt i on of caid challongo and respon s e signals is p e rform e d using 
a cryptographic Gornm i tmont function 

94. (Currently Amended) The method according to claim 91 , where tl A is + T 2 
and tu A is T| + T 2 + T, with being the duration of said first challenge signal and T 2 
being the duration of said seeond -first response signal. 

95. (Currently Amended) An apparatus for authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said apparatus including: 

means for generating a first challenge signal of minimum duration T, where T 
js a fixed time interval and tt-is larger than the channel transmission and processing 
delay; 

means for generating a random number x> computing g* modulo p, where g 
and p are numbers, deriving a key kA from g x modulo p, encrypting said first 
challenge signal with the_kA and a symmetric key cryptosvstem to provide a first 
ciphertext . and sending a-the first ciphertext to said remote party; 

means for receiving a second ciphertext, sending g x modulo p to said remote 
party, and starting a clock; 

means for receiving g y modulo p, computing a key k B from g y modulo p, 
decrytping the second ciphertext with the key k n to recover a second challenge signal 
from said remote party; 

means for verifying said second challenge stat e m e nt signal to ensure that 
said second challenge ct a t om ont si gnaj is produced by said remote party, and 
producing a ftest- second response signal of minimum duration T; 
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means for computing g* y modulo p, deriving a key kAs from g* modulo p, 
encrypting said fast- second response signal with the key to provide a fourth 
ciohertext and sending a4htf dthe fourth ciqhertext to said remote party; 

means for receiving a fourth -third ciohertext from said remote party, stopping 
said clock, decrypting the feufr Mhird ciphertext with the key k A ft to recover a co oond 
first response signal from said remote party; 

means for verifying that said elapsed time of said clock is within a 
predetermined interval (tl A , tu A ), where tl A and tu A are positive numbers; 

verifying that said seeeftd -first response signal is a response produced by 
said remote party to said first challenge signal; and 

means for generating a key k from g xy modulo p for secure communications 
with said remote part y after verifying that said first response signal is a response 
produced bv said remote party to said first challenge sicinaL 

96. (Previously Presented) The apparatus according to claim 95, wherein said 
challenge signals and response signals are signals representing biometrics 
characteristics. 

97. (Currently Amended) The apparatus according to claim 95, wherein 
verification of said se cond f irst response signal and said second challenge signal 
from theremote party is -are based on familiarity ef- with the remote party's biometrics 
cha racteristics , Encryption of said-chall e ng e and rosponco cigno l o ic p o rformed using 
a cryptographic commitment funct i on. - 

98. (Currently Amended) The apparatus according to claim 95. where tl A is Ti + 
T 2 and tu A is T, + T 2 + T, with Ti being the duration of said first challenge signal and 
T 2 being the duration of said seeend -ftrst response signal. 

99. (Currently Amended) A method of authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said method including the steps of: 

receiving a first ciphertex t. containing a first challenge signal, from this remote 
party, generating a random number y, computing g y modulo p, where g and p are 
numbers; 

producing a fos^ second challenge signal of minimum duration T T where T is a 
fixed time interval and l^is larger than the channel transmission and processing 
delay; 
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deriving a key k s from g y modulo p, encrypting said ftet-second challenge 
signal with the key k» and a symmetric key cryptosystem to provide a second 
dohertext . and sending a second dphertext to the remote party; 

receiving g x modulo p, computing a' key k A from g x modulo p, decrypting said 
first ciphertext with the key k* to recover a c o co n d thejirst challenge signal from 
remote party, sending g y modulo p t o the_remote party and starting a clock; 

verifying said se€Of*d-f[rsLchallenge ctotem e nt -signaLto make sure that said 
seeeR^-firiLchallenge ctatom e nt signal is produced by said remote party, and then 
producing a first response signal of minimum duration T; 

computing g** modulo p. deriving a key k^a from g** modulo p, encrypting said 
first response signal with the key K ap to provide a third dohertext and sending a-the 
third ciphertext to said remote party; 

receiving a fourth dphertext from said remote party, stopping the dock, 
decrypting said fourth dphertext with the key k AR to recover a second response signal 
from said remote party; 

verifying that said elapsed time of the dock is within a predetermined interval 
(tl 0 , tu B ), where tl& and tu B are positive numbers; 

verifying that said second response signal is a response produced by said 
remote party to said fifst -second . challenge signal; and 

after verifying that said first challenge signal and that said second response 
signal are produced bv said remote party and that said elapsed time is within the 
predetermined interval aonorating using a key k from g** modulo p for secure 
communications with the remote party, 

100* (Previously Presented) The method according to daim 99, wherein said 
challenge signals and response signals are signals representing biometrics 
characteristics. 

! 

101. (Currently Amended) The method according to claim 99, wherein verification 
of said seeofK Hirst challenge signal and said second response signal from said 
remote party is- are based on familiarity ot -with the remote part/s biometrics 
characteristics. Encryption of s aid cha l l e nge and rosponso oigno l s Is p e rformod us i ng 
a cryptographic commitment funct i on. 

1 02. (Currently Amended) The method according to claim 99, where tl B is T 3 + T 4 
and tu B is T 3 + T* + T, with T 3 being the duration of said first -second challenge signal 
and T 4 being the duration of said second response signal. 
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1 03. (Currently Amended) An apparatus for authenticating a remote party and 
establishing a cryptographic key for secure communications via an insecure 
communication channel, said apparatus including: 

means for receiving a>first rJphertex t containing a first challenge signal, from 
the remote party, generating a random number y, computing g y modulo p, where g 
and p are numbers; 

means for producing a ftr&t- second challenge signal of minimum duration T, 
where T is a fixed time interval and it-Is larger than the channel transmission and 
processing delay; 

means for deriving a key k& from g y modulo p ( encrypting said itet-second 
challenge signal with the key ka and a symmetric key cryptosvstem to provide a 
second ciphertext , and sending a ~the_ second ciphertext; 

means for receiving g x modulo p, computing a key k A from g x modulo p, 
decrypting said first ciphertext with the key k* to recover a-the.seeet^-flreLchallenge 
signal from the remote party, sending g y modulo p to th^remote party and starting a 
clock; 

means for verifying said secoBd-firslchallenge Gtatoment signal_to make sure 
that said seeon^- first challenge atatomont signal is produced by said remote party, 
and then producing a first response signal of minimum duration T; 

means for computing g** modulo p, deriving a key k A B from g* 7 modulo p, 
encrypting said first response signal with the key k A p to provide a third ciphertext and 
sending a-the third ciphertext to said remote party; 

means for receiving a fourth ciphertext from said remote party, stopping the 
clock, decrypting said fourth ciphertext with the key_ k A B to recover a second response 
signal from said remote party; 

means for verifying that said elapsed time of the clock is within a 
predetermined interval (tl Bf tu B ), where tl B and tu B are positive numbers; 

means for verifying that said second response signal is a response produced 
by said remote party to said fifsfc -second challenge signal; and 

means for generating using_a key k from g** modulo p for secure 
communications with the remote part y, after verifying that said sec ond response 
signal is a response produced bv said remote jjartv to said second challenge signal . 

1 04. (Previously Presented) The apparatus according to claim 1 03, wherein said 
challenge signals and response signals are signals representing biometrics 
characteristics. 
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105. (Currently Amended) The apparatus according to claim 103, wherein 
verification of said seeeRd-firsLchallenge sygnal and said second response signal 
from said remote party is~are based on familiarity sf-with th e remote party's 
biometrics characteristics.- EnoryptiOR of cai d challongo and r e spons e oignalc i s 
p erform e d u s i ng a cryptograph i c commitment function, 

1 06. (Currently Amended) The method according to claim 1 03 f where tl e is T 3 + T 4 
and tu B is T 3 + T 4 + T, with T 3 being the duration of said f^second_challenge signal 
and T 4 being the duration of said second response signal. 

107. (New) The method according to claim 75, wherein the third ciphertext is 
received with g y modulo p from said remote party and before the fourth ciphertext is 
sent. 

108. (New) The method according to claim 75, wherein the fourth ciphertext is sent 
before the third ciphertext is received, 

109. (New) The method according to claim 75 ? wherein said challenge signals and 
response signals comprise voice signals of the authenticating and remote parties. 

110. (New) The method according to claim 75, wherein said challenge signals 
contain a freshness element, being an element indicative of when the challenge 
signal Is generated. 

111. (New) The method according to claim 75, further comprising, at the remote 
party; 

receiving the first ciphertext, containing the first challenge signal, generating a 
random number y, computing g y modulo p, where g and p are numbers; 

producing the second challenge signal of minimum duration T f where T is a 
fixed time interval and is larger than the channel transmission and processing delay; 

deriving a key kB from g y modulo p, encrypting said second challenge signal 
with the key k B and a symmetric key cryptosystem to provide the second ciphertext, 
and sending said second ciphertext; 

receiving g K modulo p> deriving a key from g x modulo p. decrypting said first 
ciphertext with the key k A to recover the first challenge signal; 
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verifying that said first challenge signal is produced by the party Which 
provided the first ciphertext, and producing the first response signal of minimum 
duration T; 

computing g xy module^ p, deriving a key from g** modulo p, encrypting said 
first response signal with the key I<ab to provide the third ciphertext and sending the 
third ciphertext; 

sending g y modulo p and starting a second clock; 

receiving the fourth ciphertext! stopping the second clock, and computing the 
elapsed time of the second clock, and decrypting the fourth ciphertext with the key 
kAB to recover the second response signal; 

verifying that said elapsed time of said second clock is within a predetermined 
interval (TU» TUe), where TU and TU B are positive numbers; 

verifying that said second response signal is a response produced by the 
party which provided the first ciphertext to said second challenge signal; and 

after verifying that said first challenge signal and that said second response 
signal are produced by the party which provided the first ciphertext and that said 
elapsed time is within the predetermined interval, using a key k from g** modulo p for 
secure communications with the party which provided the first ciphertext 

112. (New) The apparatus according to daim 79. wherein 

the means for receiving the third ciphertext further comprises the means for 
receiving g y modulo p and is operable to receive the third ciphertext with g y modulo p 
from said remote party; and 

the means for receiving the third ciphertext is operable to receive the third 
ciphertext before the fourth ciphertext is sent. 

113. (New) The apparatus according to claim 79, wherein the means for producing 
the second response signal is operable to send the fourth ciphertext before the third 
ciphertext is received. 

1 14. (New) The apparatus according to claim 79, wherein said challenge signals 
and response signals comprise voice signals of the authenticating and remote 
parties. 

115. (New) The apparatus according to claim 79. wherein said challenge signals 
contain a freshness element being an element indicative of when the challenge 
signal is generated, - 1 5 - 



1 16. (New) The method according to claim 83, wherein g y modulo p is sent to said 
remote party with the third ciphertext and before the fourth ciphertext is received. 

* 

1 17. (New) The method according to claim 83, wherein g y modulo p is sent to said 
remote party after receiving g x modulo p from said remote party and before the third 
ciphertext is sent 

118. (New) The method according to claim 83, wherein said challenge signals and 
response signals comprise voice signals of the authenticating and remote parties. 

1 19. (New) The method according to claim 83, wherein said challenge signals 
contain a freshness element, being an element indicative of when the challenge 
signal is generated. 

120. (New) The apparatus according to claim 87, wherein 

the means for computing g** modulo p further comprises the means for 
sending g y modulo p and is operable to send g y modulo p to the remote party with the 
third ciphertext; and 

the means for sending g y modulo p is operable to send g y modulo p to said 
remote party before the fourth ciphertext is received. 

121 . (New) The apparatus according to daim 87. wherein the means for sending 
g y modulo p is operable to send g y modulo p to said remote party after g x modulo p is 
received from said remote party and before the third ciphertext is sent. 

1 22* (New) The apparatus according to claim 87, wherein said challenge signals 
and response signals represent biometrics characteristics. 

123. (New) The apparatus according to claim 87, wherein said challenge signals 
and response signals comprise voice signals of the authenticating and remote 
parties. 

124. (New) The apparatus according to claim 87, wherein said challenge signals 
contain a freshness element, being an element indicative of when the challenge 
signal is generated. 
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